Detecting security vulnerabilities on computing devices

A system for identifying security vulnerabilities on computing devices, the system comprising:

• a processor programmed to initiate executable operations comprising:
• detecting an inter-process communication on a computing device;
• determining whether the inter-process communication is consistent with a predefined specification of a security vulnerability;
• and
• causing a predefined action to be performed on the computing device responsive to determining that the inter-process communication is consistent with a predefined specification of a security vulnerability, wherein
• the determining comprises determining where the security vulnerability is a susceptibility to a confidentiality violation.

A computer program product for identifying security vulnerabilities on computing devices, the computer program product comprising:

• a computer-readable storage medium having stored therein computer-readable program code, which when executed by a computer hardware system, causes the computer hardware system to perform
• detecting an inter-process communication on a computing device;
• determining whether the inter-process communication is consistent with a predefined specification of a security vulnerability;
• and
• causing a predefined action to be performed on the computing device responsive to determining that the inter-process communication is consistent with a predefined specification of a security vulnerability, wherein
• the computer-readable storage medium is not a transitory, propagating signal per se, and
• the determining comprises determining where the security vulnerability is a susceptibility to a confidentiality violation.